HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 1
HP Integrity and HP 9000 iLO MP Operations Guide HP Part Number: 5991-6006 Published: January 2008 Edition: Fifth Edition
HP Integrity and HP 9000 iLO MP Operations Guide HP Part Number: 5991-6006 Published: January 2008 Edition: Fifth Edition
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 3
... New and Changed Information in This Edition 13 Publishing History...13 Document Organization...14 Typographic Conventions...15 HP-UX Release Name and Release Identifier 15 Related Documents...16 HP Encourages Your Comments...16 1 Introduction to iLO MP 17 Features...17 Standard Features...17 Always-on Capability...18 Virtual Front Panel...18 Multiple Access...
... New and Changed Information in This Edition 13 Publishing History...13 Document Organization...14 Typographic Conventions...15 HP-UX Release Name and Release Identifier 15 Related Documents...16 HP Encourages Your Comments...16 1 Introduction to iLO MP 17 Features...17 Standard Features...17 Always-on Capability...18 Virtual Front Panel...18 Multiple Access...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 4
......36 Modifying User Accounts and Default Password 36 Setting Up Security...36 Setting Security Access...37 4 Accessing the Host Console 39 Accessing the iLO MP Using the Web GUI 39 Accessing Online Help...40 Accessing the Host Console Using the TUI 40 Accessing the Graphic Console Using VGA...LDAP 46 Configuring LDAP Lite Default Schema 46 Setting up Directory Security Groups 47 Login Process Using Directory Services Without Schema Extensions 47 6 Using iLO...49 Text User Interface...49 MP Command Interfaces...49 MP Main Menu ...49 MP Main Menu Commands...49 CO (Console) Leave the MP ...
......36 Modifying User Accounts and Default Password 36 Setting Up Security...36 Setting Security Access...37 4 Accessing the Host Console 39 Accessing the iLO MP Using the Web GUI 39 Accessing Online Help...40 Accessing the Host Console Using the TUI 40 Accessing the Graphic Console Using VGA...LDAP 46 Configuring LDAP Lite Default Schema 46 Setting up Directory Security Groups 47 Login Process Using Directory Services Without Schema Extensions 47 6 Using iLO...49 Text User Interface...49 MP Command Interfaces...49 MP Main Menu ...49 MP Main Menu Commands...49 CO (Console) Leave the MP ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 5
...configuration 57 FW: Firmware upgrade...57 HE (Help): Display help for menu or command 57 ID: Display or modify system information 58 IT: Modify iLO MP inactivity timers 58 LC: LAN configuration...58 LDAP: LDAP configuration 59 LM: License management...61 LOC: Locator LED status...61 LS: LAN ...66 UC (User Configuration): Controls user access 66 VDP: Display virtual diagnostics panel LEDs 67 WHO: Display a list of iLO MP connected users 68 XD: Diagnostics or reset of the iLO MP 68 Web GUI...68 System Status...69 System Status > Status Summary General 69 System Status > Status Summary > ...
...configuration 57 FW: Firmware upgrade...57 HE (Help): Display help for menu or command 57 ID: Display or modify system information 58 IT: Modify iLO MP inactivity timers 58 LC: LAN configuration...58 LDAP: LDAP configuration 59 LM: License management...61 LOC: Locator LED status...61 LS: LAN ...66 UC (User Configuration): Controls user access 66 VDP: Display virtual diagnostics panel LEDs 67 WHO: Display a list of iLO MP connected users 68 XD: Diagnostics or reset of the iLO MP 68 Web GUI...68 System Status...69 System Status > Status Summary General 69 System Status > Status Summary > ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 6
...Ins for Active Directory 98 Example: Creating and Configuring Directory Objects for Use with iLO MP in Active Directory...98 Directory Services Objects...102 Active Directory Snap-Ins...102 Managing HP Devices Within a Role 102 Managing Users in a Role 103 Setting Login Restrictions...104...Directory Services for eDirectory...107 Installing and Initializing Snap-Ins for eDirectory 107 Creating and Configuring Directory Objects for Use with iLO MP Devices in eDirectory..........108 Creating Objects...108 Creating Roles...109 Directory Services Objects for eDirectory 111 Adding Role Managed ...
...Ins for Active Directory 98 Example: Creating and Configuring Directory Objects for Use with iLO MP in Active Directory...98 Directory Services Objects...102 Active Directory Snap-Ins...102 Managing HP Devices Within a Role 102 Managing Users in a Role 103 Setting Login Restrictions...104...Directory Services for eDirectory...107 Installing and Initializing Snap-Ins for eDirectory 107 Creating and Configuring Directory Objects for Use with iLO MP Devices in eDirectory..........108 Creating Objects...108 Creating Roles...109 Directory Services Objects for eDirectory 111 Adding Role Managed ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 7
... Enforced 122 User Address Restrictions...122 Creating Multiple Restrictions and Roles 123 Directory Services Schema (LDAP)...124 HP Management Core LDAP Object Identifier Classes and Attributes 124 Core Classes...124 Core Attributes...124 Core Class Definitions......126 hpqRoleIPRestrictionDefault 126 hpqRoleIPRestrictions...127 hpqRoleTimeRestriction...127 iLO MP-Specific LDAP OID Classes and Attributes 127 iLO MP Classes...127 iLO MP Attributes...128 iLO MP Class Definitions...128 hpqLOMv100...128 iLO MP Attribute Definitions 128 hpqLOMRightLogin...128 hpqLOMRightRemoteConsole ...
... Enforced 122 User Address Restrictions...122 Creating Multiple Restrictions and Roles 123 Directory Services Schema (LDAP)...124 HP Management Core LDAP Object Identifier Classes and Attributes 124 Core Classes...124 Core Attributes...124 Core Class Definitions......126 hpqRoleIPRestrictionDefault 126 hpqRoleIPRestrictions...127 hpqRoleTimeRestriction...127 iLO MP-Specific LDAP OID Classes and Attributes 127 iLO MP Classes...127 iLO MP Attributes...128 iLO MP Class Definitions...128 hpqLOMv100...128 iLO MP Attribute Definitions 128 hpqLOMRightLogin...128 hpqLOMRightRemoteConsole ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 9
......95 7-3 Schema Results Screen...96 7-4 Directory Example for mpiso.com 99 7-5 Create New HP Management Object Dialog Box 100 7-6 Select Users Dialog Box...101 7-7 Lights-Out Management Tab...101 7-8 HP Devices Tab...103 7-9 Members Tab...104 7-10 Role Restrictions Tab...105 7-11 Logon Hours Window...Time Enforcement...122 7-24 Multiple Restriction Roles...123 7-25 Restricting Reset Role...124 9 rp4410/4440) Card Version 1 26 2-4 iLO MP LAN LEDs (rx4640; rx2620; rp4410/4440) Card Version 2 26 2-5 iLO MP LAN LEDs (rx1600; List of Figures 2-1 Console Serial Port Connector...25...
......95 7-3 Schema Results Screen...96 7-4 Directory Example for mpiso.com 99 7-5 Create New HP Management Object Dialog Box 100 7-6 Select Users Dialog Box...101 7-7 Lights-Out Management Tab...101 7-8 HP Devices Tab...103 7-9 Members Tab...104 7-10 Role Restrictions Tab...105 7-11 Logon Hours Window...Time Enforcement...122 7-24 Multiple Restriction Roles...123 7-25 Restricting Reset Role...124 9 rp4410/4440) Card Version 1 26 2-4 iLO MP LAN LEDs (rx4640; rx2620; rp4410/4440) Card Version 2 26 2-5 iLO MP LAN LEDs (rx1600; List of Figures 2-1 Console Serial Port Connector...25...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 11
... hpqRoleMembership...126 7-10 hpqTargetMembership...126 7-11 hpqRoleIPRestrictionDefault...126 7-12 hpqRoleIPRestrictions...127 7-13 hpqRoleTimeRestriction...127 7-14 iLO MP Classes...127 7-15 iLO MP Attributes...128 7-16 hpqLOMv100...128 7-17 hpqLOMRightLogin...128 7-18 hpqLOMRightRemoteConsole...129 7-19 hpqLOMRightServerReset...129 7-... 129 11 rx2600; rp4410/4440) Card Version 1 26 2-4 iLO MP LAN LED Status Descriptions (rx4640; List of Tables 1 Publishing History Details...13 2 HP-UX 11i Releases...15 1-1 Supported Systems and Required Components Matrix 21...
... hpqRoleMembership...126 7-10 hpqTargetMembership...126 7-11 hpqRoleIPRestrictionDefault...126 7-12 hpqRoleIPRestrictions...127 7-13 hpqRoleTimeRestriction...127 7-14 iLO MP Classes...127 7-15 iLO MP Attributes...128 7-16 hpqLOMv100...128 7-17 hpqLOMRightLogin...128 7-18 hpqLOMRightRemoteConsole...129 7-19 hpqLOMRightServerReset...129 7-... 129 11 rx2600; rp4410/4440) Card Version 1 26 2-4 iLO MP LAN LED Status Descriptions (rx4640; List of Tables 1 Publishing History Details...13 2 HP-UX 11i Releases...15 1-1 Supported Systems and Required Components Matrix 21...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 13
...date and part number indicate the document's current edition. Document updates may be issued between editions to use the HP Integrated Lights Out Management Processor (iLO MP) for HP 9000 and Integrity servers. rp4410/4440)" (page 26). • Added scripting syntax to the appropriate product ...Enterprise Linux® and SuSE Enterprise Linux Server rx1600, rx1620, rx2620, rx2600 cx2600, January 2008 cx2620 rp3410, rp3440 rx4640, rp4440 rx5670, BL60p 5991-5984 HP-UX Microsoft Windows Server 2003 Red Hat Enterprise Linux and SuSE Enterprise Linux Server rx1600, rx1620, rx2620, rx2600 ...
...date and part number indicate the document's current edition. Document updates may be issued between editions to use the HP Integrated Lights Out Management Processor (iLO MP) for HP 9000 and Integrity servers. rp4410/4440)" (page 26). • Added scripting syntax to the appropriate product ...Enterprise Linux® and SuSE Enterprise Linux Server rx1600, rx1620, rx2620, rx2600 cx2600, January 2008 cx2620 rp3410, rp3440 rx4640, rp4440 rx5670, BL60p 5991-5984 HP-UX Microsoft Windows Server 2003 Red Hat Enterprise Linux and SuSE Enterprise Linux Server rx1600, rx1620, rx2620, rx2600 ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 14
... glossary to learn about iLO MP functionality. Table 1 Publishing History Details (continued) Document Manufacturing Part Number Operating Systems Supported Supported Servers Publication Date 5971-4289 HP-UX Microsoft Windows Server 2003 Red Hat Enterprise Linux and SuSE Enterprise Linux Server rx1600, rx1620, rx2620, rx2600 cx2600, September 2006 cx2620 rp3410, rp3440 rx4640, rp4440 rx5670...
... glossary to learn about iLO MP functionality. Table 1 Publishing History Details (continued) Document Manufacturing Part Number Operating Systems Supported Supported Servers Publication Date 5971-4289 HP-UX Microsoft Windows Server 2003 Red Hat Enterprise Linux and SuSE Enterprise Linux Server rx1600, rx1620, rx2620, rx2600 cx2600, September 2006 cx2620 rp3410, rp3440 rx4640, rp4440 rx5670...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 17
...to describe the management functionality embedded in the off position. In addition, HP uses the term "management processor" to refer to any embedded microprocessor that does not present a LAN interface to the iLO MP and is completely independent of methods. Management processor is a descriptive term... system. The operating system cannot send packets out on the iLO MP LAN, and packets on iLO MP supported HP servers: Features 17 The iLO MP Advanced Pack license is in HP servers, including "the management processor." The iLO MP is available whenever the system is a subsystem that manages...
...to describe the management functionality embedded in the off position. In addition, HP uses the term "management processor" to refer to any embedded microprocessor that does not present a LAN interface to the iLO MP and is completely independent of methods. Management processor is a descriptive term... system. The operating system cannot send packets out on the iLO MP LAN, and packets on iLO MP supported HP servers: Features 17 The iLO MP Advanced Pack license is in HP servers, including "the management processor." The iLO MP is available whenever the system is a subsystem that manages...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 18
..., or reset the server, and the right to configure locally stored user accounts. Multiple Users Multiple users can have write access to the iLO MP commands. Multiple Access Methods There are several login security features. User accounts are password protected and are repeated. In the event of ...access to the server and to the shared console. However, iLO MP Command mode and console mode are mirrored, allowing only one second is imposed on the serial connection and the login banner warnings are...
..., or reset the server, and the right to configure locally stored user accounts. Multiple Users Multiple users can have write access to the iLO MP commands. Multiple Access Methods There are several login security features. User accounts are password protected and are repeated. In the event of ...access to the server and to the shared console. However, iLO MP Command mode and console mode are mirrored, allowing only one second is imposed on the serial connection and the login banner warnings are...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 19
... to do so can impact performance. Features 19 IMPORTANT: Although the iLO MP can support multiple simultaneous connections of all connected console users, and any user can provide input. HP does not recommend running more than eight simultaneous connections. With IPMI over... LAN The Intelligent Platform Management Interface (IPMI) option provides direct access from the HP website at: http://www.hp.com/go/bizsupport Internal Subsystem Information The iLO MP displays information about the following internal subsystems: • Field Replaceable Unit (FRU) information ...
... to do so can impact performance. Features 19 IMPORTANT: Although the iLO MP can support multiple simultaneous connections of all connected console users, and any user can provide input. HP does not recommend running more than eight simultaneous connections. With IPMI over... LAN The Intelligent Platform Management Interface (IPMI) option provides direct access from the HP website at: http://www.hp.com/go/bizsupport Internal Subsystem Information The iLO MP displays information about the following internal subsystems: • Field Replaceable Unit (FRU) information ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 20
...and system events. HPSIM Group Actions HP Systems Insight Manager (HPSIM) is not needed. Remote Power Control The iLO MP enables remote power cycle; and TOC. For more information about the iLO MP object or privileges, and the only thing the iLO MP queries from the directory server ... Not extending the schema on the directory server means the directory server does not know anything about HPSIM, see: http://www.docs.hp.com/go/hpsim. the iLO MP supports: • SSH2 implementation. • Authentication algorithms RSA and DSA. • Encryption algorithms 3DES-CBC and AES128-CBC...
...and system events. HPSIM Group Actions HP Systems Insight Manager (HPSIM) is not needed. Remote Power Control The iLO MP enables remote power cycle; and TOC. For more information about the iLO MP object or privileges, and the only thing the iLO MP queries from the directory server ... Not extending the schema on the directory server means the directory server does not know anything about HPSIM, see: http://www.docs.hp.com/go/hpsim. the iLO MP supports: • SSH2 implementation. • Authentication algorithms RSA and DSA. • Encryption algorithms 3DES-CBC and AES128-CBC...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 21
... is required to Use; factory installed rx2660, rp3410, • Minimum iLO firmware version: E.03.15 rp3440 rx4640, rp4410, • I /O Card; factory installed • Minimum iLO firmware version: E.03.15 Emulation device connector included with emulation device (not provided by HP). factory installed • Minimum iLO firmware version: E.03.15 Local I/O cable emulation device connector included...
... is required to Use; factory installed rx2660, rp3410, • Minimum iLO firmware version: E.03.15 rp3440 rx4640, rp4410, • I /O Card; factory installed • Minimum iLO firmware version: E.03.15 Emulation device connector included with emulation device (not provided by HP). factory installed • Minimum iLO firmware version: E.03.15 Local I/O cable emulation device connector included...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 22
...-end%20Montvale)/mvx%20info.htm Security It is available regardless of the enterprise and architected iLO include the following: Authentication Determines who is an independent microprocessor running an embedded operating system. For graceful host operating system shutdown, HP Systems Insight Manager integration requires health drivers and management agents or remote console access...
...-end%20Montvale)/mvx%20info.htm Security It is available regardless of the enterprise and architected iLO include the following: Authentication Determines who is an independent microprocessor running an embedded operating system. For graceful host operating system shutdown, HP Systems Insight Manager integration requires health drivers and management agents or remote console access...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 23
Security Setup HP generally recommends that iLO management traffic be on a separate management network and that only ... data. Privacy iLO MP uses SSL for web connections, RSL-RC4 encryption for the remote serial console, and SSH-DES3/DES128 2.0 recommended encryption algorithms for HP Integrity and HP 9000 - For security reasons, HP strongly recommends you...at the MP> prompt. For example, you can create local accounts or use the SA command. Because iLO devices are completely autonomous and can enable or disable telnet, IPMI over LAN, web, and SSH connectivity. ...
Security Setup HP generally recommends that iLO management traffic be on a separate management network and that only ... data. Privacy iLO MP uses SSL for web connections, RSL-RC4 encryption for the remote serial console, and SSH-DES3/DES128 2.0 recommended encryption algorithms for HP Integrity and HP 9000 - For security reasons, HP strongly recommends you...at the MP> prompt. For example, you can create local accounts or use the SA command. Because iLO devices are completely autonomous and can enable or disable telnet, IPMI over LAN, web, and SSH connectivity. ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 24
at the top right corner of MP Main Menu commands : Enter the command name for help on individual command TOPics : Show all MP Help topics and commands HElp : Display this screen Q : Quit help ==== MP:HE To display the Main Menu Command List, enter LI at the MP HE: prompt. Accessing Help Using the Web GUI To access help about that page. 24 Introduction to the MP Main Menu enter Q. To return to iLO MP You can also click the ? OVerview : Launch the help overview LIst : Show the list of each page to display help from the web GUI, click the Help tab.
at the top right corner of MP Main Menu commands : Enter the command name for help on individual command TOPics : Show all MP Help topics and commands HElp : Display this screen Q : Quit help ==== MP:HE To display the Main Menu Command List, enter LI at the MP HE: prompt. Accessing Help Using the Web GUI To access help about that page. 24 Introduction to the MP Main Menu enter Q. To return to iLO MP You can also click the ? OVerview : Launch the help overview LIst : Show the list of each page to display help from the web GUI, click the Help tab.
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 25
... LAN Port" (page 25) Console Serial Port Figure 2-1 shows the console serial port connector with numbered labels for each pin. Figure 2-2 iLO MP LAN Port Table 2-2 maps the iLO MP LAN port connector pin numbers to its signal description. Table 2-1 Console Serial Port Pinouts Pin Number 1 2 3 4 5 6 7 8 9 Signal Description... data Not used Ground Not used Requests to send Clears to send Not used iLO MP LAN Port Figure 2-2 shows the iLO MP LAN port connector pins and LEDs. 2 Ports and LEDs All iLO MP functions are available through the server LAN and the local and remote console ...
... LAN Port" (page 25) Console Serial Port Figure 2-1 shows the console serial port connector with numbered labels for each pin. Figure 2-2 iLO MP LAN Port Table 2-2 maps the iLO MP LAN port connector pin numbers to its signal description. Table 2-1 Console Serial Port Pinouts Pin Number 1 2 3 4 5 6 7 8 9 Signal Description... data Not used Ground Not used Requests to send Clears to send Not used iLO MP LAN Port Figure 2-2 shows the iLO MP LAN port connector pins and LEDs. 2 Ports and LEDs All iLO MP functions are available through the server LAN and the local and remote console ...
HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition
Page 26
... display as in Figure 2-4. Activity present On other servers, the LEDs display as in the server, the iLO MP LAN port LEDs display differently. Table 2-4 lists the status of the (iLO MP) card exist for these servers. rp4410/4440) Card Version 2 26 Ports and LEDs This connector has... two LEDs, LAN link and LAN activity, that signal status and activity. rp4410/4440) Card Version 1 Table 2-3 iLO MP LAN LED Status Descriptions (rx4640; Table 2-2 iLO MP LAN Port Pinouts Pin Number 1 2 3 4 5 6 7 8 Signal Description TXP TXN RXP Not used Not used RXN Not ...
... display as in Figure 2-4. Activity present On other servers, the LEDs display as in the server, the iLO MP LAN port LEDs display differently. Table 2-4 lists the status of the (iLO MP) card exist for these servers. rp4410/4440) Card Version 2 26 Ports and LEDs This connector has... two LEDs, LAN link and LAN activity, that signal status and activity. rp4410/4440) Card Version 1 Table 2-3 iLO MP LAN LED Status Descriptions (rx4640; Table 2-2 iLO MP LAN Port Pinouts Pin Number 1 2 3 4 5 6 7 8 Signal Description TXP TXN RXP Not used Not used RXN Not ...